61 matches found
Sven gopeak masterlab code issue vulnerability
Sven gopeak masterlab is a Sven open source application. Provides simple and efficient , agile development based project management tools . Sven gopeak masterlab version 3.3.10 and earlier versions of the code problematic vulnerability , the vulnerability stems from app/ctrl/admin/User.php...
Sven gopeak masterlab code issue vulnerability
Sven gopeak masterlab is a Sven open source application. Provides simple and efficient , agile development based project management tools . Sven gopeak masterlab version 3.3.10 and earlier versions of the code problematic vulnerability , the vulnerability stems from app/ctrl/User.php...
CVE-2023-7147: Unrestricted Upload of File with Dangerous Type
A vulnerability, which was classified as critical, was found in gopeak MasterLab up to 3.3.10. Affected is the function base64ImageContent of the file app/ctrl/User.php. The manipulation of the argument image leads to unrestricted upload. It is possible to launch the attack remotely. VDB-249150 i...
PT-2023-32914 · Unknown · Gopeak Masterlab
Name of the Vulnerable Software and Affected Versions: gopeak MasterLab versions up to 3.3.10 Description: A critical issue has been found in the function add/update of the file app/ctrl/admin/User.php, where the manipulation of the avatar argument leads to unrestricted upload. This issue can be...
CVE-2023-7159: Unrestricted Upload of File with Dangerous Type
A vulnerability was found in gopeak MasterLab up to 3.3.10. It has been declared as critical. Affected by this vulnerability is the function add/update of the file app/ctrl/admin/User.php. The manipulation of the argument avatar leads to unrestricted upload. The attack can be launched remotely. T...
CVE-2023-7146: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in gopeak MasterLab up to 3.3.10. This issue affects the function sqlInjectDelete of the file app/ctrl/framework/Feature.php of the component HTTP POST Request Handler. The manipulation of the argument phone leads to sql injection...
Sven gopeak masterlab SQL Injection Vulnerability
Sven gopeak masterlab is a Sven open source application. Provide simple and efficient , agile development based project management tools . Sven gopeak masterlab version 3.3.10 and earlier versions of the SQL injection vulnerability , the vulnerability stems from app/ctrl/Framework.php sqlInject...
Sven gopeak masterlab security breach
Sven gopeak masterlab is a Sven open source application. Provides simple and efficient , agile development based project management tools . Sven gopeak masterlab version 3.3.10 and earlier versions of a security vulnerability , the vulnerability stems from app/ctrl/framework/Feature.php sqlInject...
PT-2023-32905 · Unknown · Gopeak Masterlab
Name of the Vulnerable Software and Affected Versions: gopeak MasterLab versions up to 3.3.10 Description: A critical vulnerability has been found in the HTTP POST Request Handler component of gopeak MasterLab. This issue affects the sqlInject function of the file app/ctrl/framework/Feature.php...
PT-2023-32907 · Gopeak · Gopeak Masterlab
Name of the Vulnerable Software and Affected Versions: gopeak MasterLab versions up to 3.3.10 Description: A critical issue has been found in the HTTP POST Request Handler component, specifically affecting the function sqlInjectDelete of the file app/ctrl/framework/Feature.php. The manipulation o...
PT-2023-32908 · Unknown · Gopeak Masterlab
Name of the Vulnerable Software and Affected Versions: gopeak MasterLab versions up to 3.3.10 Description: A critical vulnerability was found in gopeak MasterLab. The issue affects the function base64ImageContent of the file app/ctrl/User.php. The manipulation of the argument image leads to...
PT-2023-32906 · Unknown · Gopeak Masterlab
Name of the Vulnerable Software and Affected Versions: gopeak MasterLab versions up to 3.3.10 Description: A critical vulnerability was found in the HTTP POST Request Handler component of gopeak MasterLab. This issue affects the sqlInject function in the file app/ctrl/Framework.php. The...
CVE-2020-23534
A server-side request forgery SSRF vulnerability in Upgrade.php of gopeak masterlab 2.1.5, via the 'source' parameter...
CVE-2020-23534
A server-side request forgery SSRF vulnerability in Upgrade.php of gopeak masterlab 2.1.5, via the 'source' parameter...
Server side request forgery (ssrf)
A server-side request forgery SSRF vulnerability in Upgrade.php of gopeak masterlab 2.1.5, via the 'source' parameter...
CVE-2020-23534
A server-side request forgery SSRF vulnerability in Upgrade.php of gopeak masterlab 2.1.5, via the 'source' parameter...
CVE-2020-23534
A server-side request forgery SSRF vulnerability in Upgrade.php of gopeak masterlab 2.1.5, via the 'source' parameter...
CVE-2020-23534
CVE-2020-23534 is a server-side request forgery (SSRF) vulnerability affecting gopeak masterlab 2.1.5, exploitable via the 'source' parameter in Upgrade.php. The connected records confirm this specific vulnerable component and parameter; no additional exploit details, affected versions beyond 2.1...
PT-2021-10907
Name of the Vulnerable Software and Affected Versions gopeak masterlab version 2.1.5 Description A server-side request forgery SSRF issue exists due to the source parameter in Upgrade.php. This allows for potential unauthorized access to internal resources. Recommendations For gopeak masterlab...